summaryrefslogtreecommitdiffstats
path: root/theos/certs
diff options
context:
space:
mode:
authorJohannes Löthberg <johannes@kyriasis.com>2019-01-02 20:40:05 +0100
committerJohannes Löthberg <johannes@kyriasis.com>2019-01-02 20:40:05 +0100
commit8fb8a773fe939a00a44384b55e33abc53474ac89 (patch)
tree46bddb1ebb28091d3bd0a4aed5a0074a3635cb71 /theos/certs
parentbd7248d27115b46f6e4ae35d1af2fd32f5101b73 (diff)
downloadfile-8fb8a773fe939a00a44384b55e33abc53474ac89.tar.xz
theos/certs/matrix: Copy cert instead of ACL
They're reset on every run otherwise, which is annoying. Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
Diffstat (limited to 'theos/certs')
-rw-r--r--theos/certs/matrix_kyriasis_com.sls24
1 files changed, 16 insertions, 8 deletions
diff --git a/theos/certs/matrix_kyriasis_com.sls b/theos/certs/matrix_kyriasis_com.sls
index 26981f3..0828d04 100644
--- a/theos/certs/matrix_kyriasis_com.sls
+++ b/theos/certs/matrix_kyriasis_com.sls
@@ -13,14 +13,22 @@ matrix.kyriasis.com:
- require_in:
- service: nginx_service
-synapse-access-matrix:
- acl.present:
- - name: /etc/letsencrypt/archive/matrix.kyriasis.com/
- - acl_type: default:user
- - acl_name: synapse
- - perms: r-x
- - recurse: True
- - require_in:
+/etc/synapse/ssl/fullchain.pem:
+ file.copy:
+ - source: /etc/letsencrypt/live/matrix.kyriasis.com/fullchain.pem
+ - user: synapse
+ - group: synapse
+ - mode: 600
+ - onchanges:
+ - acme: matrix.kyriasis.com
+
+/etc/synapse/ssl/privkey.pem:
+ file.copy:
+ - source: /etc/letsencrypt/live/matrix.kyriasis.com/fullchain.pem
+ - user: synapse
+ - group: synapse
+ - mode: 600
+ - onchanges:
- acme: matrix.kyriasis.com
# vim: set ft=yaml et: